Design Solutions That Align with the Microsoft Cloud Adoption Framework for Azure (CAF) and the Azure Well-Architected Framework SC-100 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company runs a machine learning workload in Azure. The security architect is reviewing the workload against the Azure Well-Architected Framework. The team is concerned about unauthorized access to the model and data. Which recommendation should the architect prioritize?

   • AUse Azure Active Directory (now Microsoft Entra ID) authentication and role-based access control (RBAC) for the machine learning workspace.
   • BEncrypt the model with customer-managed keys.
   • CUse a private endpoint for the machine learning workspace.
   • DEnable Azure Defender for Machine Learning to detect threats.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A company has a web application that uses a single virtual machine for both the web server and the database. The security architect is reviewing the workload against the Azure Well-Architected Framework. Which recommendation aligns with the security pillar?

   • AKeep the single VM but enable Azure Defender for Servers to detect threats.
   • BMove the database to Azure SQL Database and keep the web server on the VM without network restrictions.
   • CSeparate the web server and database onto different VMs and use network security groups to restrict traffic between them.
   • DKeep the single VM but add a network security group to allow only HTTPS traffic.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which security design principle is a key recommendation of the Azure Well-Architected Framework's Security pillar?

   • ADisable all logging to reduce the attack surface.
   • BUse a single administrator account for all management tasks to simplify control.
   • CRely solely on perimeter firewalls for protection.
   • DApply defense in depth by layering multiple security controls.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A security architect is evaluating an existing workload that uses Azure Functions. The workload processes sensitive data and the architect is reviewing the design against the Azure Well-Architected Framework. Which recommendation should the architect make to improve security?

   • AUse connection strings in the function code.
   • BDisable authentication on the function app to simplify access.
   • CUse managed identities to access Azure Key Vault and store secrets in Key Vault.
   • DStore secrets in application settings and use environment variables.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   A security architect is recommending security solutions based on the Azure Well-Architected Framework. Which recommendation aligns with the Security pillar?

   • ADeploy all resources in a single region to simplify management.
   • BMinimize logging to reduce storage costs.
   • CEncrypt data at rest and in transit.
   • DUse a single availability zone to reduce complexity.
   Reveal Solution Discussion Select an answer first